Overview

overview

10

Static

static

823cb4b92a...64.dll

windows7_x64

1

823cb4b92a...64.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    823cb4b92a1266c880d917c7d6f71da37d524166287b30c0c89b6bb03c2e4b64

  • Size

    9.7MB

  • Sample

    210401-bflxhn3mw2

  • MD5

    7c4ac7601ff409585e404ce409744918

  • SHA1

    4f037fcc7ce0f5509ee451e4760e21b9ca3ff55f

  • SHA256

    823cb4b92a1266c880d917c7d6f71da37d524166287b30c0c89b6bb03c2e4b64

  • SHA512

    cfdc5194a7713b6c4d793ff917bc854022c67228a03e0d2364360166b7c362d23ee1f670dafe6bf977f64e08e1b0fed1b85fbb029ebbbaf0713258bcc20f3ade

Score
10/10
parallaxrat

Malware Config

Targets

    • Target

      823cb4b92a1266c880d917c7d6f71da37d524166287b30c0c89b6bb03c2e4b64

    • Size

      9.7MB

    • MD5

      7c4ac7601ff409585e404ce409744918

    • SHA1

      4f037fcc7ce0f5509ee451e4760e21b9ca3ff55f

    • SHA256

      823cb4b92a1266c880d917c7d6f71da37d524166287b30c0c89b6bb03c2e4b64

    • SHA512

      cfdc5194a7713b6c4d793ff917bc854022c67228a03e0d2364360166b7c362d23ee1f670dafe6bf977f64e08e1b0fed1b85fbb029ebbbaf0713258bcc20f3ade

    Score
    10/10
    parallaxrat

    • ParallaxRat

      ParallaxRat is a multipurpose RAT written in MASM.

      ratparallax

    • ParallaxRat payload

      Detects payload of Parallax Rat, a small portable Rat usually digitally signed with a Sectigo certificate.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks